[codex] Add optional skill auto publish after review

[shiyiyue1102]

Fixes #15023

Summary

This PR adds an opt-in switch for skill versions to be published automatically after the review pipeline approves them.

Changes

• Add nacos.ai.skill.auto-publish-after-review.enabled, defaulting to false for compatibility.
• Route skill pipeline completion through a skill-specific callback that publishes approved versions only when the switch is enabled.
• Add a system publish path for pipeline callbacks so auto-publish does not depend on request-scoped user visibility context.
• Document the new property in distribution/conf/application.properties.
• Ignore local tool directories .qoder/ and openspec/.

Validation

• git diff --cached --check
• mvn -pl ai -Dtest=SkillOperationServiceImplTest#testSubmitAutoPublishWhenPipelineApproved+testSubmitShouldNotAutoPublishByDefaultWhenPipelineApproved test

Notes

pom.xml local version change for packaging/debugging was intentionally not included in this PR.

[github-actions]

Thanks for your this PR. 🙏
Please check again for your PR changes whether contains any usage/api/configuration change such as Add new API , Add new configuration, Change default value of configuration.
If so, please add or update documents(markdown type) in docs/next/ for repository nacos-group/nacos-group.github.io

---

感谢您提交的PR。 🙏
请再次查看您的PR内容，确认是否包含任何使用方式/API/配置参数的变更，如：新增API、新增配置参数、修改默认配置等操作。
如果是，请确保在提交之前，在仓库nacos-group/nacos-group.github.io中的docs/next/目录下添加或更新文档（markdown格式）。

[codecov-commenter]

Codecov Report

❌ Patch coverage is 81.48148% with 5 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
...s/ai/service/skills/SkillOperationServiceImpl.java	72.22%	3 Missing and 2 partials ⚠️

📢 Thoughts on this report? Let us know!